first off, since #158167, the test needs to share the module's service's `StateDirectory` during setup to work properly. more importantly, certmgr seems to default to the `authsign` endpoint instead of `sign` ever since its last update in nixpkgs (#271299). while I would have liked to somehow disable/revert this behaviour, it wasn't obvious to me how to. set up the cfssl server to accept a single authentication key, and tell certmgr to use that for its requests
6.3 KiB
6.3 KiB